Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8e620c2-6dc6-435b-ba64-e1ec7efcd63f.roa
File:                     f8e620c2-6dc6-435b-ba64-e1ec7efcd63f.roa (raw, json)
Hash identifier:          kIZdP0nqxXgtljf/X2zG8zFdHzyWxQkU1+cIkl8x2yA=
Subject key identifier:   2D:32:42:D2:D1:0B:AC:03:8D:CE:FC:24:DC:4B:88:B7:A4:56:AE:30
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4192317B6350EFA96F0D9AF6E35CE76FC30AB30A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8e620c2-6dc6-435b-ba64-e1ec7efcd63f.roa
Signing time:             Mon 20 Oct 2025 05:41:32 +0000
ROA not before:           Mon 20 Oct 2025 05:41:32 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.139.176.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:92:31:7b:63:50:ef:a9:6f:0d:9a:f6:e3:5c:e7:6f:c3:0a:b3:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 05:41:32 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=38edbe112a50c81a9777ce09d6c17e6a43e2646832ad89985445b07a65ec2a9c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:04:02:a8:49:95:7e:11:00:89:5e:13:ee:3b:
                    38:0a:e5:5b:e5:cd:f6:f0:50:b2:e6:d2:3c:ea:d2:
                    2e:d9:ae:6c:0d:24:f0:f2:b9:0d:b5:b7:d1:af:8d:
                    7f:82:7e:cb:5d:43:b3:4c:d6:1d:f9:65:04:14:56:
                    c1:c3:e0:7f:69:21:63:c1:80:e1:2b:43:7f:63:70:
                    84:b4:9c:e1:03:8f:7c:15:ad:be:a5:92:06:e4:f3:
                    4a:b3:8e:08:c1:a7:43:2a:1a:aa:b1:76:6e:76:84:
                    90:4e:76:cc:f7:9d:c1:e6:6b:86:90:72:00:f2:73:
                    7c:49:b4:fe:39:85:6f:1f:70:85:20:18:8a:05:94:
                    03:78:fa:a7:ca:89:e2:01:06:e7:fe:e2:9c:34:b1:
                    35:7a:22:d8:14:90:83:5a:15:a8:74:e8:af:db:3b:
                    1d:95:dd:12:02:8c:80:f4:0b:7c:1c:b4:83:f9:65:
                    6e:96:e3:62:bf:0a:ff:45:88:f3:11:70:43:d5:bb:
                    c9:df:08:94:da:ae:46:67:9b:fd:6c:29:06:40:08:
                    a4:6f:c8:74:3e:ff:f9:e8:4b:fa:ed:7c:89:00:23:
                    52:c6:c9:6b:01:fb:1d:2c:ff:8a:d9:74:2d:8c:73:
                    f6:c0:53:20:be:15:ed:9b:6d:ec:e2:1e:fa:31:ae:
                    b2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:32:42:D2:D1:0B:AC:03:8D:CE:FC:24:DC:4B:88:B7:A4:56:AE:30
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8e620c2-6dc6-435b-ba64-e1ec7efcd63f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.139.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c4:54:28:fc:c4:6e:23:d1:da:05:95:45:00:30:ee:d2:e1:58:
         57:67:e7:68:11:90:21:45:94:c1:5b:7c:b9:83:38:e4:73:ba:
         1f:09:f3:2e:13:71:c3:f5:63:b3:e0:d4:f2:a2:e6:c0:a3:b9:
         7d:70:01:51:1f:20:ca:7a:e4:38:b6:79:6c:26:21:f2:0e:65:
         01:30:09:21:82:20:82:ea:5f:46:33:12:20:ae:c1:32:e4:e5:
         08:76:a2:07:a5:2d:38:13:d0:bc:2c:98:2a:79:16:3c:86:ba:
         d3:e8:07:bf:a2:3f:6e:dd:8d:66:60:8d:ae:fa:06:32:d2:14:
         b3:18:8b:d7:c3:17:55:53:ff:e5:03:d9:fc:93:44:fc:af:9b:
         bc:5a:8c:bd:81:4b:8c:fa:19:6e:c3:a2:b9:28:13:fc:f5:03:
         33:a2:ad:38:38:0f:03:2e:c5:8d:03:ca:77:d4:a7:15:3a:72:
         4a:0f:0f:9f:51:11:0c:b9:56:68:77:ae:36:51:1a:07:3e:af:
         e2:15:48:1f:db:30:58:4d:8f:55:a2:82:bc:81:7d:8f:64:a2:
         6e:5d:c0:30:9a:86:3b:56:32:dd:da:0c:6d:19:a0:7a:b8:79:
         76:9d:4f:ea:95:bb:7e:77:77:75:71:3c:6b:8a:c0:3b:77:f0:
         12:24:90:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----